Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/ojVhoZt8QwDM82uaN1AHX0O_6A8.roa
File: ojVhoZt8QwDM82uaN1AHX0O_6A8.roa (raw, json)
Hash identifier: F3xNzYjfTZrxldFbVsDL0LMyjXk5l9jWeG1/I/MiIiA=
Subject key identifier: A2:35:61:A1:9B:7C:43:00:CC:F3:6B:9A:37:50:07:5F:43:BF:E8:0F
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 06969AD0
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/ojVhoZt8QwDM82uaN1AHX0O_6A8.roa
Signing time: Tue 26 Apr 2022 10:17:06 +0000
ROA not before: Tue 26 Apr 2022 10:17:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206818
IP address blocks: 45.14.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110533328 (0x6969ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Apr 26 10:17:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a23561a19b7c4300ccf36b9a3750075f43bfe80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:b7:ac:4d:1d:50:68:49:6d:6d:91:6d:8c:
00:f7:79:68:a0:9c:07:62:42:95:44:24:86:bf:f7:
47:f3:09:8b:5b:39:50:fe:9a:63:b2:cb:ed:2a:88:
0f:58:2a:57:5f:9b:06:1e:fc:36:d3:ed:54:57:85:
f2:f0:81:65:74:5f:86:08:ba:62:7b:7e:73:7d:b6:
b9:fd:4d:16:3a:6a:19:63:da:5b:64:56:23:31:85:
a1:c2:dd:d0:e1:de:95:c2:d2:2a:24:39:f7:6b:5d:
d6:ec:6d:39:2d:03:16:18:ec:49:54:24:4f:60:0a:
a7:a9:fa:72:8f:ca:8f:ae:71:32:96:9e:26:4c:12:
d0:35:d1:fb:cb:0e:75:e5:b7:e2:82:78:17:44:82:
db:ea:2c:24:00:1e:4c:8f:e3:7a:c9:aa:55:96:a5:
b2:16:b0:6b:7d:bc:e9:e6:91:58:c7:aa:48:5a:db:
b4:68:3a:3c:c0:0d:9f:ed:37:ba:8f:cc:6e:9c:35:
4a:8d:75:d3:c2:7c:81:a4:38:b6:1d:71:b0:38:1f:
70:29:38:b8:01:a4:f5:9d:b4:a5:0b:3e:bd:5e:d0:
12:f3:4e:0a:fd:01:54:ab:d6:45:5e:9e:1c:1e:30:
73:a3:48:17:d8:d8:23:19:80:03:97:28:7c:18:44:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:35:61:A1:9B:7C:43:00:CC:F3:6B:9A:37:50:07:5F:43:BF:E8:0F
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/ojVhoZt8QwDM82uaN1AHX0O_6A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.248.0/22
Signature Algorithm: sha256WithRSAEncryption
70:5e:1b:c9:da:02:14:a6:8e:94:74:20:d6:ae:50:22:7d:99:
19:2b:ba:f3:2f:a1:6f:07:c6:99:75:c4:78:ac:1b:88:be:32:
56:17:a6:85:2d:35:d5:f6:fa:28:ae:cf:57:75:c7:9c:c5:09:
58:5d:86:34:2a:8b:9a:8e:d0:72:a8:e3:93:68:be:58:77:3c:
90:ce:72:d3:0a:14:a0:c5:9b:00:d4:b2:89:92:ef:19:95:ac:
aa:a2:a3:25:62:13:a5:b9:70:a9:13:ab:c5:95:6b:52:07:23:
a7:8b:6f:ee:5d:26:e5:f6:82:ea:09:9d:c2:66:cc:54:b3:f0:
d6:3b:e8:66:a1:38:f5:53:5c:88:2c:cf:63:4b:8b:88:72:0a:
86:df:6c:32:35:ff:f0:93:eb:91:8a:e8:f0:be:c4:81:3b:00:
56:8b:93:3c:28:99:e1:ca:77:f1:69:40:4b:65:f9:2b:3d:39:
4d:33:dd:98:f4:e0:34:79:64:d8:3e:58:81:ad:5e:fe:0c:0d:
d9:5b:12:d9:00:c9:ec:5c:fa:95:00:aa:73:07:ce:83:aa:50:
6b:34:c6:9d:bb:b9:01:55:ef:ac:3e:12:af:a3:b1:ee:80:9a:
00:71:bd:71:f2:8b:d6:4d:fa:bc:a5:01:13:ac:cb:4a:a8:14:
23:38:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:36 2024 by rpki-client on console-ams.rpki-client.org